It totally works. But, of course someone needs a physical access to your system for this. To protect this, you have grub password and BIOS password.
Still, someone can yank off your hard drive and run away.
This is what I have learnt from others.